keyhog-scanner 0.5.40

keyhog-scanner: high-performance SIMD-accelerated secret detection engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

schema_version = 1
detector_id = "upcloud-api-credentials"
service = "upcloud"
severity = "critical"

# Auto-generated contract (gen_contracts.py). Hand-edit to add more
# real-world shapes; the auto-stub validates the detector at
# least fires on its canonical-shape anchor + body.

[[positive]]
text = "upcloud_password  = '       \"=       :    : \"    = ' : \"   :      ' ' \" \" Nof>d!U-[st51o|GX%zxSDQ.]HM^:4Rm<zs&V_6USihGd;gIr2"
credential = "Nof>d!U-[st51o|GX%zxSDQ.]HM^:4Rm<zs&V_6USihGd;gIr2"
reason = "Canonical anchor + synthesized body satisfying detector's primary regex."

[[positive]]
text = "upcloud_password  = '       \"=       :    : \"    = ' : \"   :      ' ' \" \" Nof>d!U-[st51o|GX%zxSDQ.]HM^:4Rm<zs&V_6USihGd;gIr2"
credential = "Nof>d!U-[st51o|GX%zxSDQ.]HM^:4Rm<zs&V_6USihGd;gIr2"
reason = "Quoted-value variant of the canonical positive."

[[negative]]
text = "upcloud_password  = '       \"=       :    : \"    = ' : \"   :      ' ' \" \" YOUR_API_KEY_HERE_PLACEHOLDER_VALUE"
reason = "Placeholder-keyword body — suppression gate matches PLACEHOLDER prefix."

[[negative]]
text = "upcloud_password  = '       \"=       :    : \"    = ' : \"   :      ' ' \" \" Nof>dEXAMPLEEXAMPLE;gIr2"
reason = "EXAMPLE token marker inside the body — suppression gate strips it."